Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mjallow
New Contributor

Help Opening Port 8585 on new Server

I have 2 servers.

Server A - 192.168.1.246

Server B - 192.168.1.243

External IP Address: 23.236.5.33

 

Firewall: Fortigate100D.

Attempting to Open: Port 8585

 

I have the same settings for Server A and Server B in fortigate100D

 

 

Under Virtual IPS For Server B:

Interface: Any 

External IP Address: 23.236.5.33

Mapped IP Address/Range: 192.168.1.243

Protocol: TCP

External Port Service: 86

Map to Port: 8585

 

We have port 85,86  open with Server A.

I used Port 88 to test with.

I was able to open Port 88 however any other port i try and open with Server A fails except for port 88.

 

No ports whatsoever work when I use Server B as the mapped IP range (Mapped IP range 192.168.1.243)

 

 

 

 

1 REPLY 1
Dave_Hall
Honored Contributor

If you are trying to create port forwards to two internal servers, you need to set them up on different external ports: e.g.

 

config firewall vip     edit "vip-to-server1"         set extintf "wan1"         set portforward enable         set mappedip "192.168.1.246"         set extport 85-86         set mappedport 8585-8586     next     edit "vip-to-server2"         set extintf "wan1"         set portforward enable         set mappedip "192.168.1.243"         set extport 88         set mappedport 8585     next end

Then on the firewall policy, set the source address accordingly (e.g. 0/0 or all for any device connection) then set the dest address to the VIPs. Set NAT accordingly.

 

 

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors